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AMENDMENTS TO THE CLAIMS 




1 . (Original) Y\ system for remote configuration of a transaction processing 
device, comprising: 

a transaction processing device for providing a network service; and 
a remote configuration server, wherein said configuration server is capable of 
communicating securely witra said transaction processing device via a public communications 
network, wherein said transaction processing device is capable of communicating securely 
with said configuration server Via said public network, and wherein said transaction 
processing device is capable oflbeing remotely configured by said configuration server via 
said public communications network. 



2. (Original) The system of claim 1, wherein said transaction processing device 
comprises: 

a first cryptographic servicfes module for providing secure communication of 
information from said transaction processing device to said configuration server via said 
public communications network. 

3. (Original) The systen^of claim 2, wherein said remote configuration server 
comprises: 

a second cryptographic serviced module for providing secure communication of 
information from said configuration server to said transaction processing device via said 
public network. 

4. (Original) The system of ^laim 3, wherein said transaction processing device 
further comprises: 

a first communications protocol st^ck to facilitate communication over said 
communications network. 

5. (Original) The system of cldim 1, wherein said transaction processing device 
communicates securely over said public network without utilizing a host processor based 
system that is external to said device. 

6. (Original) The system of clair^ 4, wherein said communications protocol stack 
is a TCP/IP stack. 
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7. (Original) The sy 



Docket No.: 56728/P001US/10001505 



fptem of claim 4, wherein said configuration server 

comprises: 

a configuration module, ^vherein said second cryptographic services module is part of 
said configuration module. 

8. (Original) The system of claim 4, wherein said configuration server 
comprises: 

a second communications Protocol stack to facilitate communication with said 
transaction processing device oven said communications network. 

9. (Original) The system of claim 8, further comprising: 
a certificate manager communicatively connected to said transaction processing 

device, wherein said certificate manager issues a terminal certificate to said transaction 
processing device. 

10. (Original) The systefn of claim 9, wherein said certificate manager issues a 
server certificate to said configuration server. 

1 1 . (Original) The system of claim 9, wherein said terminal certificate is stored in 
said first cryptographic services module. 

12. (Original) The system of claim 10, wherein said server certificate is stored in 
said second cryptographic services module. 

13. (Original) The system of claim 11, wherein said terminal certificate is stored 
in said second cryptographic services module. 

14. (Original) The systerrJof claim 12, wherein said server certificate is stored in 
said first cryptographic services module. 

15. (Original) The system of claim 11, wherein said first cryptographic services 
module further comprises at least one cryptographic algorithm for encrypting information 
transmitted from said transaction processing device to said configuration server. 

16. (Original) The system lof claim 12, wherein said second cryptographic services 
module further comprises at least onelcryptographic algorithm for encrypting information 
transmitted from said configuration server to said transaction processing device. 
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1 7. (Original) The system of claim 9, wherein said certificate manager is part of 
said configuration server. 

18. (Original) The system of claim 9, wherein said configuration server further 
comprises: 

a security services modtle, wherein said security services module extracts a public 
key of said transaction processing device from said certificate of said transaction processing 
device to authenticate said tran saction processing device. 



19. (Original) The 
signs a hash of configuration d; 
database services module of 
server. 



said 



s/stem of claim 18, wherein said cryptography services module 
4ta about said transaction processing device retrieved from a 
configuration server with a private key of the configuration 



20. (Original) The s; astern of claim 19, wherein said signed configuration data is 
encrypted with said extracted public key of said transaction processing device and transmitted 
to said transaction processing d rvice over said public communications network. 



21. (Original) The 
transmitted to said transaction 



system of claim 19, wherein said signed configuration data is 
rocessing device over said public comminations network. 



22. (Original) The 
a web server for present 
processing device, wherein said 
configuration server via said 



system of claim 20, further comprising: 
ng a web based user interface to a user of said transaction 
user can update configuration data stored on said 
wdb based user interface. 



23. (Original) The s 
authentication module for 



Claims 24 through 34 (Canceled) 



35. (Original) A me 
comprising the steps of: 

authenticating said tran 
authenticating said con 
configuration server includes 
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'Stem of claim 22, wherein said web server comprises a user 
verifying said user of said transaction processing device. 



hod for remotely configuring a transaction processing device, 



laction processing device by a configuration server; 
guration server to said transaction processing device, if said 
configuration data about said transaction processing device; 
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providing said configuration data to said transaction processing device by said 
configuration server; 

storing said provided configuration data by said transaction processing device; 

receiving by said confi juration server an acknowledgment from said transaction 
processing device; and 

storing said received information including said configuration data by said 
configuration server. 



36. (Original) The 
transaction processing device 

initiating a connection 

device; 

encrypting an identifying 
private key of said transaction 

transmitting said encr>{pted 
configuration server; and 

decrypting said received 
public key of said transaction 

37. (Original) The 



method of claim 35, wherein said authenticating said 
tep comprises the steps of: 

with a communication network by said transaction processing 

token by said transaction processing device utilizing a 
processing device; 

identifying token via said communication network to said 

identifying token by said configuration server utilizing a 
>rocessing device. 



nethod of claim 36, wherein said authenticating said 
configuration server step comprises the steps of: 

encrypting an identifying number of said configuration server by said configuration 
server utilizing a private key c f said configuration server; 

transmitting said encr>pted identifying number via said communication network to 
said transaction processing device; and 

decrypting said receiv ;d identifying number by said transaction processing device 
utilizing a public key of said c onfiguration server. 



38. (Original) The : 
configuration data comprises 

encrypting at least a portion 

and 

transmitting said encrypted configuration data to said transaction processing device. 



method of claim 37, wherein said step of providing 
the steps of: 

of said configuration data by said configuration server; 
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39. (Original) The method of claim 38, wherein said step of storing said provided 
configuration data further comprises the steps of: 

verifying by said transaction processing device that it is the intended recipient of said 

i lformation; and 

n processing device that the received encrypted 



received encrypted configuration 
verifying by said transactk 



information was sent by said confi guration server. 

40. (Original) The metjiod of claim 35, wherein said transaction processing device 
is a point-of-sale terminal. 

41. (New) A system ft r remote configuration of a transaction processing device, 
comprising: 

a stand-alone transaction brocessing device for providing financial services 
processing, said transaction processing device having a data network interface providing 
communication between said trai isaction processing device and a public data network, said 

ving a cryptography module providing secure 
communication via said public d ita network; and 

a remote configuration server, wherein said configuration server securely 
communicates with said transaction processing device via said public data network to 

] on processing device for use by a particular subscriber 
al services. 



remotely configure said transact] 
account in providing said financ 



syste n 



46. (New) The 
a communications protocol stac 
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42. (New) The system of claim 41, wherein said public data network comprises 
the Internet. 

43. (New) The systen of claim 41, wherein said financial services processing 
comprises credit card transactions 

44. (New) The systekn of claim 41, wherein said financial services processing 
comprises debit card transactior i 

45. (New) The systim of claim 41, wherein said financial services processing 
comprises point of sale transactions. 



of claim 41, wherein said data network interface comprises 
implemented in hardware. 
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47. (New) The system o 
cryptographic services implemented 



V. 
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claim 41, wherein said cryptography module comprises 
in hardware. 



48. (New) The system of claim 41, wherein said transaction processing device 
further has a card reader. 



49. (New) The system of 
to provide communication between 
network. 



claim 41, wherein said data network interface is adapted 
slaid transaction processing device and a private data 



50. (New) The system of|claim 
comprises control circuitry selecting 
private data network. 



51. (New) The system of 
of said public data network and said 
associated with a particular financial 



49, wherein said transaction processing device 
ommunication via said public data network and said 



^lairn 49, wherein selection of communication via one 
\ private data network is based upon information 
service transaction then being processed. 
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